We’re Running Out of Time to Secure US Election Tech with Harri Hursti, Security Researcher & International Speaker
Sep 5, 2024
auto_awesome
In this conversation with Harri Hursti, a renowned security researcher and international speaker, the vulnerabilities of US voting technology take center stage. Harri delves into longstanding issues from past elections, emphasizing the risks of outdated systems and insider threats. He argues for holistic security measures, highlighting the importance of paper ballots for integrity. The complexities of implementing blockchain in voting also spark discussion, as does the pressing need for robust electoral practices ahead of the crucial 2024 elections.
The U.S. voting system is plagued by over 20 years of unresolved technological vulnerabilities, fueled by a lack of stringent security standards.
A small number of companies dominate the voting machine market, creating barriers to competition which stifles innovation and effective regulation.
Implementing hand-marked paper ballots and enhancing voter education are critical strategies to improve election security and trust in the voting process.
Deep dives
Longstanding Vulnerabilities in Voting Technology
Many vulnerabilities in U.S. voting machines have existed for over 20 years without resolution. The issue partly stems from the aftermath of the 2000 presidential election, where a rush to improve election technology resulted in inadequate security standards. Despite congressional funding aimed at establishing security measures, states ended up purchasing outdated technology, often designed without security in mind. As a result, even today, many machines still operate on guidelines that effectively ignore essential security protocols.
Market Consolidation and Regulation Issues
The voting machine industry is dominated by just a few companies, with two entities holding 80% of the market. This consolidation has created significant barriers to entry for new vendors, thus limiting competition and innovation. Furthermore, the current self-regulation model has shown to be ineffective, as vendors can essentially dictate the conditions under which their machines are tested. This lack of strict regulatory oversight raises concerns about the integrity and security of voting systems in the U.S.
Insider Threats and Election Security
The security landscape of U.S. elections is vulnerable to insider threats, which have not been sufficiently addressed by existing safeguards. Many older voting systems were designed without considering today's broader and more complex threat models, such as nation-state interference. Consequently, the risk of manipulation through insider access remains a pressing issue that needs solutions beyond mere software code checks. Instead, comprehensive assessments must include hardware vulnerabilities and physical system protections.
Challenges and Recommendations for Voting Processes
Despite various voting systems in use across the U.S., recommendations suggest that adopting hand-marked paper ballots would significantly enhance election security. This method provides a reliable means to audit and verify votes in the event of discrepancies while counteracting the challenges posed by electronic voting machines. Additionally, a future focus on developing secure, open-source voting technologies could improve the system, though complexities in the existing legal framework complicate matters. Voter education about the intricacies of the voting process is vital in ensuring informed participation and confidence in the system.
Misinformation and Its Impact on Democracy
Misinformation campaigns are increasingly threatening voter trust and participation in elections. The intent behind these efforts is often to discourage certain demographics from voting, particularly by fostering a sense of cynicism around the electoral process. Addressing these issues requires strong, clear communication from election officials and campaigns to ensure the public understands how the voting process works. Ultimately, active participation is necessary for a healthy democracy, making it critical to combat these misleading narratives.
Today, we’re talking to Harri Hursti, Security Researcher & International Speaker. We discuss the impending technological vulnerabilities of the upcoming US election, whether or not they can be mitigated, and what Harri thinks about the future of voting technology in the US.
All of this right here, right now, on the Modern CTO Podcast!